From 0bd367bf16044f5c6ae0c3cafa85b6c6cfeeea81 Mon Sep 17 00:00:00 2001
From: Mohamed Chrayed <mohamed@chrayed.de>
Date: Fri, 6 Mar 2026 18:06:53 +0100
Subject: [PATCH] update secrets

---
 modules/security/sys/sopsnix.nix | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/modules/security/sys/sopsnix.nix b/modules/security/sys/sopsnix.nix
index c03f6a2..9f97111 100644
--- a/modules/security/sys/sopsnix.nix
+++ b/modules/security/sys/sopsnix.nix
@@ -3,5 +3,8 @@
     imports = [ inputs.sops-nix.nixosModules.sops ];
     environment.systemPackages = [ pkgs.age pkgs.sops ];
     sops.defaultSopsFile = ../secrets/secrets.yaml;
+    systemd.tmpfiles.rules = [
+      "d /var/lib/sops/root-keys 0700 root root -"
+     ];
   };
 }